Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
File:                     uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft (raw, json)
Hash identifier:          i15Q+QNaVsynchggRAm5rVUceMZ1I/qNUh2bHgiW1Mo=
Subject key identifier:   95:60:62:13:21:BC:03:BF:37:27:D2:6F:E8:0B:6C:5F:1A:9F:40:F7
Authority key identifier: B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5
Certificate issuer:       /CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
Certificate serial:       0194BBCE10E0F1580D6446A485896D415920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 10:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:31 +0000
Files and hashes:         1: GqJY_-YaLfVhDAO9-9FtProS6ws.roa (hash: OZM5pFFT51z72joYWwzEXxW0xM8WMd3VRKym1LwnAf0=)
                          2: uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl (hash: 6xvUfmxpoeOAi/McslIxXTtIwlGo5Y4tqTrZ8cMtXQo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:10:e0:f1:58:0d:64:46:a4:85:89:6d:41:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
        Validity
            Not Before: Jan 31 10:00:31 2025 GMT
            Not After : Feb  1 10:00:31 2025 GMT
        Subject: CN=9560621321bc03bf3727d26fe80b6c5f1a9f40f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:29:a4:e1:bb:96:70:2f:0e:f0:b9:fc:dc:
                    dd:f9:4a:f2:f8:a1:29:4f:07:51:a7:7f:8f:10:21:
                    87:38:25:87:66:49:a6:f5:9b:88:b3:48:af:28:ff:
                    9c:c0:f5:4b:7d:bb:94:ed:99:93:34:58:09:ee:fe:
                    d8:a0:6c:52:9f:b9:e5:75:7d:89:0f:c8:29:9a:c5:
                    64:9b:70:2d:2f:f2:a5:a2:b5:0a:5c:c3:a7:33:77:
                    a9:c5:25:a5:ad:57:e2:78:27:98:b4:09:49:56:cc:
                    a4:ff:ba:80:11:e2:34:1a:87:5e:b8:d5:f7:61:b6:
                    32:47:4d:51:52:4d:09:89:06:cd:be:0c:da:c9:9f:
                    cb:7b:90:43:09:6f:9b:e2:12:b5:de:5f:80:34:3f:
                    85:19:94:a9:d0:fe:55:71:17:73:09:fa:09:f6:51:
                    bb:59:9d:aa:19:ac:8b:b8:32:51:e3:7b:c5:bd:d7:
                    f1:ef:cb:7d:9f:4d:f0:41:fc:b2:98:96:38:76:24:
                    ef:61:72:9e:3e:25:2c:d2:b5:ff:89:17:c9:cc:98:
                    0f:38:71:1e:72:95:57:8d:4c:23:ee:97:81:ca:70:
                    1c:52:7c:c8:7d:ca:40:3c:bf:62:a1:46:b8:27:08:
                    17:e7:47:8d:26:75:a2:4a:5d:88:3e:ea:5c:1e:10:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:60:62:13:21:BC:03:BF:37:27:D2:6F:E8:0B:6C:5F:1A:9F:40:F7
            X509v3 Authority Key Identifier:
                keyid:B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fa:b6:d8:c7:27:bc:78:8e:63:fa:43:dc:9b:e0:c2:c2:b4:
         3b:e9:82:60:05:6b:b4:0e:a3:0c:48:a9:39:a9:ff:eb:5f:fc:
         ba:f8:11:2e:ec:be:7f:c3:d4:ec:d9:fe:7b:1b:7b:50:ef:82:
         b5:2d:81:a7:f9:cc:c2:e9:83:bd:eb:98:9b:2b:29:6d:fd:9c:
         54:fb:a2:0d:8c:2a:bc:92:c0:9c:0a:ed:43:a0:71:7e:23:71:
         99:7b:94:8f:48:d6:11:dc:3d:10:60:cc:5e:f6:87:f3:53:e5:
         fd:8c:56:74:87:bb:d3:1d:1f:d0:c2:68:53:cd:ae:25:80:0d:
         0d:31:4e:9e:c6:89:7a:58:3b:27:01:75:36:85:20:45:4a:d3:
         86:a4:41:f3:0e:b9:cd:14:47:af:1b:57:4d:2e:83:2e:c3:87:
         47:5f:4a:da:05:70:b8:c7:1e:22:2f:56:bf:b6:61:29:b6:ad:
         ee:9e:ff:c7:2b:40:ea:dc:f9:1a:46:49:d9:38:83:62:5b:23:
         65:cc:b1:3f:e3:3e:f1:92:28:ba:b2:8d:2e:ea:36:94:d1:d7:
         60:f9:d6:59:9a:83:6b:a9:30:9a:bf:a5:17:b6:e3:ee:77:2b:
         14:61:de:fe:be:2e:e1:05:70:67:a7:fd:01:c8:e1:ce:e2:e4:
         cd:9b:4a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:41:53 2025 by rpki-client